/^Received\: from \[(?!111\.222\.333\.444)\] by mail\.abcd\.de.*$/i